This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft File: hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft (raw, json) Hash identifier: O4J8+OAlJ8HuNBibeiXJu7opTQrhyi57vZovDC/Beqw= Subject key identifier: 15:8B:45:64:24:CA:51:91:A5:4F:4F:83:4E:E5:B8:D0:75:D1:EF:91 Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B Certificate issuer: /CN=8405c07192a8106fedb0760b8945032ca1d3054b Certificate serial: 019B53AB68DD14C67BCB1FA0AEB7A769F882 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft Manifest number: 1356 Signing time: Thu 25 Dec 2025 04:01:40 +0000 Manifest this update: Thu 25 Dec 2025 04:01:40 +0000 Manifest next update: Fri 26 Dec 2025 04:01:40 +0000 Files and hashes: 1: hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl (hash: 10/hNaaTnUvHWMGpTWukag2xOrcdqFc+WFsCqdu48OI=) 2: nUJoZVEyJ7Ch6Htt7Gy_l4EGdUs.roa (hash: DEXI+dom+CuVEOOs+wIFSM6Zic3MADgfCsnWrZCTC3o=) 3: obW6OP_TwhwF5onkjJQKoKfjNUI.roa (hash: l/D/ppG7tJiDZNB6ndliGGQdEPYg23vbQP0qpyOUO3E=) 4: zTErCzfeAqe_qlccgZ6Xz2BpNCc.roa (hash: 9mx99kal+/jXSa14TzN46OzBllqi4wkCOsaAScYXF7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 04:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:68:dd:14:c6:7b:cb:1f:a0:ae:b7:a7:69:f8:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b Validity Not Before: Dec 25 04:01:40 2025 GMT Not After : Dec 26 04:01:40 2025 GMT Subject: CN=158b456424ca5191a54f4f834ee5b8d075d1ef91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0a:2b:b5:a9:f0:fa:7e:2a:87:b9:41:90:b3: 2e:41:1d:4f:fb:d2:40:0c:87:0f:15:b9:75:64:50: 05:53:ea:4e:95:7d:82:24:bc:d2:d0:54:94:d7:a8: 01:52:97:00:f5:2f:21:56:c2:69:d2:71:21:51:8e: 24:7a:e0:71:54:8e:a0:2d:da:66:f7:e2:43:64:bd: fc:22:83:de:2b:29:2d:80:1c:26:27:04:f2:64:a0: 2e:10:2e:42:45:0f:0b:07:61:1e:42:bc:63:a3:0e: 0a:09:a5:71:63:f4:77:dc:2d:9f:16:9e:8a:28:5b: e0:8f:64:bd:29:2a:3f:97:66:27:a6:5b:8e:13:24: 5b:b7:75:cb:14:99:7a:bb:ab:ad:cd:c3:5f:db:d5: 0b:80:bc:c9:40:03:7e:a3:72:28:48:1d:df:8b:9d: 97:a4:c8:0c:fb:3d:02:5b:fb:78:16:62:44:69:42: e4:a6:d7:7b:20:57:3b:c1:a9:9a:c4:20:bb:78:25: e6:a7:14:bb:c0:59:7a:f4:35:5f:0f:37:e2:ba:f3: 45:91:c1:57:f7:cd:b9:ed:fa:2f:f4:f3:22:49:26: a5:d1:72:98:06:bd:17:d7:62:bb:2e:b6:fe:c5:75: 5d:63:32:39:a4:2d:ba:41:38:e7:55:73:f1:e3:1a: 80:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8B:45:64:24:CA:51:91:A5:4F:4F:83:4E:E5:B8:D0:75:D1:EF:91 X509v3 Authority Key Identifier: keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:56:df:55:67:ed:97:94:3c:4b:37:66:5a:67:33:c7:dd:bf: 8a:c7:8c:13:6e:c5:80:27:3b:b9:b4:6a:e3:e6:e0:58:2b:c0: f0:8b:42:8b:b2:8b:1e:5c:c1:49:40:b3:2b:5a:69:62:11:b5: 9f:ed:42:fe:e4:b2:47:b7:2b:42:49:72:a6:61:b7:ce:96:c1: 0e:b7:75:4c:f6:95:30:02:3c:52:9b:9c:cc:c5:e6:e3:da:f7: 9d:38:2e:82:26:85:24:08:41:b4:57:d6:c7:98:88:ec:41:dc: 82:d1:5f:b2:1d:78:e0:69:12:1c:a9:d8:cc:47:63:ed:0f:46: 16:54:5f:1a:10:ff:3b:cd:3e:45:ae:70:cc:12:d4:61:1d:c8: e3:36:ce:16:af:ec:bb:af:bc:a1:ae:b1:da:14:b2:8f:5f:a3: 4c:76:3e:74:1e:c4:26:d5:ee:5d:0d:ee:44:6d:c1:c6:07:08: 74:f9:fe:df:52:8e:df:77:63:ab:b5:c0:81:98:fa:03:e1:2c: 84:d4:8f:03:d8:96:83:9a:86:fb:9c:a7:53:9f:2b:d2:a1:db: bf:aa:d4:ca:95:2f:1c:b4:19:72:74:df:ea:40:ec:12:bd:31: 44:c8:5e:bd:ed:c8:50:df:fa:69:92:b9:9e:b0:b5:78:6a:e2: 03:c0:57:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq2jdFMZ7yx+grrenafiCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MDVjMDcxOTJhODEwNmZlZGIwNzYwYjg5NDUwMzJjYTFk MzA1NGIwHhcNMjUxMjI1MDQwMTQwWhcNMjUxMjI2MDQwMTQwWjAzMTEwLwYDVQQD EygxNThiNDU2NDI0Y2E1MTkxYTU0ZjRmODM0ZWU1YjhkMDc1ZDFlZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gortanw+n4qh7lBkLMuQR1P+9JA DIcPFbl1ZFAFU+pOlX2CJLzS0FSU16gBUpcA9S8hVsJp0nEhUY4keuBxVI6gLdpm 9+JDZL38IoPeKyktgBwmJwTyZKAuEC5CRQ8LB2EeQrxjow4KCaVxY/R33C2fFp6K KFvgj2S9KSo/l2YnpluOEyRbt3XLFJl6u6utzcNf29ULgLzJQAN+o3IoSB3fi52X pMgM+z0CW/t4FmJEaULkptd7IFc7wamaxCC7eCXmpxS7wFl69DVfDzfiuvNFkcFX 98257fov9PMiSSal0XKYBr0X12K7Lrb+xXVdYzI5pC26QTjnVXPx4xqA0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWLRWQkylGRpU9Pg07luNB10e+RMB8GA1UdIwQY MBaAFIQFwHGSqBBv7bB2C4lFAyyh0wVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEFYQWNaS29FR190c0hZTGlVVURMS0hUQlVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNjE1YjAtNGQ5OC00YTNkLThiZDIt NGM5M2JlZTI3ZDU0LzEvaEFYQWNaS29FR190c0hZTGlVVURMS0hUQlVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNjE1YjAtNGQ5OC00YTNkLThiZDItNGM5M2JlZTI3ZDU0 LzEvaEFYQWNaS29FR190c0hZTGlVVURMS0hUQlVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1bfVWft l5Q8SzdmWmczx92/iseME27FgCc7ubRq4+bgWCvA8ItCi7KLHlzBSUCzK1ppYhG1 n+1C/uSyR7crQklypmG3zpbBDrd1TPaVMAI8UpuczMXm49r3nTgugiaFJAhBtFfW x5iI7EHcgtFfsh144GkSHKnYzEdj7Q9GFlRfGhD/O80+Ra5wzBLUYR3I4zbOFq/s u6+8oa6x2hSyj1+jTHY+dB7EJtXuXQ3uRG3BxgcIdPn+31KO33djq7XAgZj6A+Es hNSPA9iWg5qG+5ynU58r0qHbv6rUypUvHLQZcnTf6kDsEr0xRMheve3IUN/6aZK5 nrC1eGriA8BXYw== -----END CERTIFICATE-----Generated at Thu Dec 25 13:59:00 2025 by rpki-client